Behavioral task
behavioral1
Sample
暴风激活17.0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
暴风激活17.0.exe
Resource
win10v2004-20220812-en
General
-
Target
暴风激活17.0.exe
-
Size
1.7MB
-
MD5
ef7807c1dd5119374a57942042feec3a
-
SHA1
0f6bb215f40a6b9b2a4995feb397599a75f4e9f3
-
SHA256
10f6750074bea056d42958846b8de840c0cc58c765ecefc684b0cf5797ed27e1
-
SHA512
bd6be98dbfb3ba62ca1260519a239fe99856e1396710a0aee347e0629b27bc271a755dc216bb146b41f0063afcd9e90fd7d0f687c7f53d096c98acfe50ee1283
-
SSDEEP
49152:PzlVEpv41MT7pX99ffz497lMTYobmcbgWp7f4Um:blqpv41MhXffiGcbcoUm
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
暴风激活17.0.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE